garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Updated WordPress Plugin Security Testing Cheat Sheet (markdown)

Jared
2023-12-04 14:21:25 -05:00
parent 531c0ffde5
commit 6a21b45c99
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
WordPress-Plugin-Security-Testing-Cheat-Sheet.md

@@ -102,7 +102,7 @@ Example regex: `wpdb->(query|get_var|get_row|get_col|get_results|replace)\((?!.*
Unsafe escaping ('securing') API methods:
- ```esc_sql()``` function does not adequately protect against SQL Injection [https://codex.wordpress.org/Function_Reference/esc_sql](https://codex.wordpress.org/Function_Reference/esc_sql)
- ```esc_sql()``` function does not adequately protect against SQL Injection [https://developer.wordpress.org/reference/functions/esc_sql/](https://developer.wordpress.org/reference/functions/esc_sql/)
- ```escape()``` same as above
- ```esc_like()``` same as above
- ```like_escape()``` same as above